Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLytOR23eRRK77a1E-v3oDz97jA.roa
File:                     FLytOR23eRRK77a1E-v3oDz97jA.roa (raw, json)
Hash identifier:          uqRFdK2BlosAItvxemP8/t61HsBicJGubFibTlWbrRQ=
Subject key identifier:   14:BC:AD:39:1D:B7:79:14:4A:EF:B6:B5:13:EB:F7:A0:3C:FD:EE:30
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       01B7
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLytOR23eRRK77a1E-v3oDz97jA.roa
Signing time:             Tue 01 Jul 2025 01:34:36 +0000
ROA not before:           Tue 01 Jul 2025 01:34:36 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     2497
IP address blocks:        116.118.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul  1 01:34:36 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=14BCAD391DB779144AEFB6B513EBF7A03CFDEE30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:bc:84:40:a2:d4:9e:c6:16:31:c3:66:bb:
                    50:ad:11:d9:46:d5:5b:be:d1:bf:7b:b9:fc:24:23:
                    01:d4:6e:46:13:50:17:df:98:60:e8:4e:d2:7b:54:
                    a1:2a:b1:6f:10:63:49:fd:f1:47:99:50:ac:ac:f5:
                    97:9f:1f:59:b7:f1:68:89:57:22:65:93:81:c2:a6:
                    2d:d4:d7:0a:36:76:53:39:3d:96:d7:f9:6a:b7:52:
                    13:ae:de:ad:d4:28:fa:c3:38:c1:cd:50:2f:6e:6b:
                    15:cd:ab:4e:fb:e0:e9:4a:17:a6:67:39:91:7f:16:
                    6e:eb:5f:b5:0d:c4:22:c7:ee:6f:9c:57:87:8d:16:
                    7a:bf:8f:2a:84:69:fa:9f:c6:1a:ad:9f:8c:a0:d4:
                    25:a4:0c:f0:c8:79:fd:e1:4f:01:b0:58:d9:a1:6b:
                    4e:e7:af:8c:01:81:86:f2:20:0e:9b:4f:52:76:cf:
                    76:cf:0a:28:46:e0:26:5d:a6:44:f2:63:6e:cc:c1:
                    d3:15:94:f3:0d:69:90:b6:94:92:cf:c2:55:62:ba:
                    99:2d:d2:bf:36:6a:c5:25:90:34:57:88:ad:07:f9:
                    9a:19:7c:fa:1f:29:8e:31:ea:3f:16:99:d4:cf:e1:
                    bd:92:c2:96:05:a7:9b:58:df:bb:2b:a5:12:70:0d:
                    b0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BC:AD:39:1D:B7:79:14:4A:EF:B6:B5:13:EB:F7:A0:3C:FD:EE:30
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/FLytOR23eRRK77a1E-v3oDz97jA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:f8:53:ae:9a:2b:8e:8f:88:b9:4d:0f:b5:08:bf:f0:f8:3c:
         a1:02:3a:1d:a3:a2:a6:95:57:f0:7c:30:c6:49:8c:7c:d1:f3:
         77:2d:cb:1f:d0:83:3e:ab:5d:60:68:be:59:8a:d4:3e:96:d4:
         72:43:8a:bc:c1:83:21:53:3d:90:36:db:2b:70:58:13:de:0e:
         c7:8f:f3:d1:a1:38:3d:f9:c6:c2:d3:68:b5:19:7a:6d:1f:b7:
         7e:c5:dd:70:1c:f0:b3:fe:ab:d0:97:4e:78:eb:08:1c:4d:e6:
         da:2e:81:4d:99:5c:5f:a7:ee:56:31:ca:ab:f6:63:bb:d5:3e:
         22:ff:5c:3f:00:79:02:f9:5a:52:8d:cd:40:32:b4:75:f5:eb:
         31:42:25:26:e2:70:f5:c8:cf:29:cb:8c:a2:76:65:3f:53:ef:
         2e:60:48:02:75:12:02:fc:13:04:f6:cd:15:2d:b7:0c:14:ef:
         67:80:dc:13:1c:d3:a0:8d:cc:6b:0f:7d:32:77:eb:87:fa:8b:
         1d:48:8e:a8:da:43:74:e0:8a:d2:41:54:ed:10:fc:12:91:b4:
         f0:66:d5:24:0e:19:d2:54:a8:dc:60:81:98:d5:c9:cd:18:62:
         15:34:0e:fd:a1:37:3f:d6:5c:b8:96:42:53:c4:4d:9a:64:f8:
         f1:31:95:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:49:52 2025 by rpki-client